Re:How to Run a Live Coding Stream on Twitch Using OBS
by mcny on Wednesday July 15, 2020 @08:02AM
(#23843972)
Maybe the answer is simpler than that. Rotating a key should never be painful. If you accidentally reveal a key, it should be straightforward to change it (I'm sure your audience will understand if you take a one minute break).
Re:How to Run a Live Coding Stream on Twitch Using OBS
by nickjj on Wednesday July 15, 2020 @11:14AM
(#23846356)
The reveal wouldn't be by accident typically. It could be a necessary requirement based on the content you're streaming.
If you revealed a Stripe key only to change it 1 minute afterwards, you still need a process to change it in secret, which goes back to my original reply of setting up a dedicated "secret" scene so you can modify things in private.
Re:How to Run a Live Coding Stream on Twitch Using OBS
by evv on Wednesday July 15, 2020 @12:29PM
(#23847573)
You can switch to a different scene when handling sensitive details, like the camera feed or the "technical difficulties" scene. This is how I've seen folks deal with secrets in the past
Re:How to Run a Live Coding Stream on Twitch Using OBS
by VikingCoder on Wednesday July 15, 2020 @09:17AM
(#23844746)
I'm sorry, but you claimed "it's not always possible to do this," and then your example started "Let's say I live streamed."
You are making the choice to live stream. It is always possible to avoid live streaming. Always.
Let's say I live streamed implementing Stripe. There's no way to avoid not showing my test API keys if I'm going to show the end to end process of setting everything up. The best I could do is to roll the keys before I start the stream but this degrades the quality of the stream since it's not from scratch.
Of course those keys and anything else that's sensitive would be sitting in an .env file, and I'd also have an .env.example file showing how it's set up without anything sensitive being in there (I do this already in my pre-recorded videos). Even going as far as preventing the real .env file coming up when I fuzzy open files so I don't open it by accident and the contents of that file being ignored from multi-file searches.